diff --git a/charts/debug-utils/charts/corvid-app-0.10.3.tgz b/charts/debug-utils/charts/corvid-app-0.10.3.tgz new file mode 100644 index 00000000..88aefa3f Binary files /dev/null and b/charts/debug-utils/charts/corvid-app-0.10.3.tgz differ diff --git a/charts/descheduler/charts/descheduler-0.33.0.tgz b/charts/descheduler/charts/descheduler-0.33.0.tgz new file mode 100644 index 00000000..2e12083e Binary files /dev/null and b/charts/descheduler/charts/descheduler-0.33.0.tgz differ diff --git a/charts/dex/.helmignore b/charts/dex/.helmignore deleted file mode 100644 index 0e8a0eb3..00000000 --- a/charts/dex/.helmignore +++ /dev/null @@ -1,23 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*.orig -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ diff --git a/charts/dex/Chart.lock b/charts/dex/Chart.lock deleted file mode 100644 index 5cdf0a12..00000000 --- a/charts/dex/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: dex - repository: https://charts.dexidp.io - version: 0.23.0 -digest: sha256:1ea89746228c51235fc4fb406040d1e5838d2c1b6edc404ab034bd84150c6457 -generated: "2025-05-25T09:21:37.005915814+01:00" diff --git a/charts/dex/Chart.yaml b/charts/dex/Chart.yaml deleted file mode 100644 index 61d0d0c2..00000000 --- a/charts/dex/Chart.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: v2 -name: dex -description: A Helm chart for Kubernetes - -# A chart can be either an 'application' or a 'library' chart. -# -# Application charts are a collection of templates that can be packaged into versioned archives -# to be deployed. -# -# Library charts provide useful utilities or functions for the chart developer. They're included as -# a dependency of application charts to inject those utilities and functions into the rendering -# pipeline. Library charts do not define any templates and therefore cannot be deployed. -type: application - -# This is the chart version. This version number should be incremented each time you make changes -# to the chart and its templates, including the app version. -# Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.0 - -# This is the version number of the application being deployed. This version number should be -# incremented each time you make changes to the application. Versions are not expected to -# follow Semantic Versioning. They should reflect the version the application is using. -# It is recommended to use it with quotes. -appVersion: "1.16.0" - -dependencies: -- name: dex - version: 0.23.0 - repository: "https://charts.dexidp.io" diff --git a/charts/dex/README.md b/charts/dex/README.md deleted file mode 100644 index 6ecab4e3..00000000 --- a/charts/dex/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# dex - -![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.16.0](https://img.shields.io/badge/AppVersion-1.16.0-informational?style=flat-square) - -A Helm chart for Kubernetes - -## Requirements - -| Repository | Name | Version | -|------------|------|---------| -| https://charts.dexidp.io | dex | 0.23.0 | - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| dex.config.connectors[0].claimMapping | string | `nil` | | -| dex.config.connectors[0].clientID | string | `"$AUTH_CLIENT_ID"` | | -| dex.config.connectors[0].clientSecret | string | `"$AUTH_CLIENT_SECRET"` | | -| dex.config.connectors[0].config.issuer | string | `"https://auth.deepcypher.me"` | | -| dex.config.connectors[0].id | string | `"authentik"` | | -| dex.config.connectors[0].name | string | `"authentik"` | | -| dex.config.connectors[0].redirectURI | string | `"https://dex.deepcypher.me/callback"` | | -| dex.config.connectors[0].type | string | `"oidc"` | | -| dex.config.enablePasswordDB | bool | `true` | | -| dex.config.issuer | string | `"http://dex.deepcypher.me"` | | -| dex.config.storage.type | string | `"memory"` | | -| dex.enabled | bool | `true` | | -| dex.fullnameOverride | string | `"dex"` | | -| dex.ingress.annotations."cert-manager.io/cluster-issuer" | string | `"aux-issuer"` | | -| dex.ingress.className | string | `"traefik"` | | -| dex.ingress.enabled | bool | `true` | | -| dex.ingress.hosts[0].host | string | `"dex.deepcypher.me"` | | -| dex.ingress.hosts[0].paths[0].path | string | `"/"` | | -| dex.ingress.hosts[0].paths[0].pathType | string | `"Prefix"` | | -| dex.ingress.tls[0].hosts[0] | string | `"dex.deepcypher.me"` | | -| dex.ingress.tls[0].secretName | string | `"dex-cert"` | | - diff --git a/charts/dex/templates/netpol.yaml b/charts/dex/templates/netpol.yaml deleted file mode 100644 index 04ee70b0..00000000 --- a/charts/dex/templates/netpol.yaml +++ /dev/null @@ -1,37 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-deny-local-egress -spec: - podSelector: {} - policyTypes: - - Egress - egress: - - to: - # allow to go to WAN internet - - ipBlock: - cidr: 0.0.0.0/0 - except: - - 10.0.0.0/8 - - 192.168.0.0/16 - - 172.16.0.0/20 - # or allowed to go to local namespace - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: {{ .Release.Namespace }} - # Also - - to: - # allow DNS lookups - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: kube-system - # on specific ports - ports: - - protocol: UDP - port: 53 - # Also - - to: - # allow to kubernetes api default in default namespace - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: default diff --git a/charts/dex/values.yaml b/charts/dex/values.yaml deleted file mode 100644 index d1f8e53b..00000000 --- a/charts/dex/values.yaml +++ /dev/null @@ -1,110 +0,0 @@ -dex: - enabled: true - fullnameOverride: dex - - ingress: - enabled: true - className: traefik - annotations: - cert-manager.io/cluster-issuer: aux-issuer - hosts: - - host: dex.deepcypher.me - paths: - - path: / - pathType: Prefix - tls: - - hosts: - - dex.deepcypher.me - secretName: dex-cert - - config: - # Set it to a valid URL - issuer: http://dex.deepcypher.me - # See https://dexidp.io/docs/storage/ for more options - storage: - type: memory - # Enable at least one connector - # See https://dexidp.io/docs/connectors/ for more options - enablePasswordDB: true - connectors: - - type: oidc - id: authentik - name: authentik - config: - # MUST match what is in /.well-known/openid-configuration/ - issuer: "https://auth.deepcypher.me" - # connector config values starting with $ will be env substituted - clientID: $AUTH_CLIENT_ID - clientSecret: $AUTH_CLIENT_SECRET - # Dex's issuer URL + "/callback" - redirectURI: "https://dex.deepcypher.me/callback" - # Some providers require passing client_secret via POST parameters instead - # of basic auth, despite the OAuth2 RFC discouraging it. Many of these - # cases are caught internally, but some may need to uncomment the - # following field. - # - # basicAuthUnsupported: true - - # List of additional scopes to request in token response - # Default is profile and email - # Full list at https://dexidp.io/docs/custom-scopes-claims-clients/ - # scopes: - # - profile - # - email - # - groups - - # Some providers return claims without "email_verified", when they had no usage of emails verification in enrollment process - # or if they are acting as a proxy for another IDP etc AWS Cognito with an upstream SAML IDP - # This can be overridden with the below option - # insecureSkipEmailVerified: true - - # Groups claims (like the rest of oidc claims through dex) only refresh when the id token is refreshed - # meaning the regular refresh flow doesn't update the groups claim. As such by default the oidc connector - # doesn't allow groups claims. If you are okay with having potentially stale group claims you can use - # this option to enable groups claims through the oidc connector on a per-connector basis. - # This can be overridden with the below option - # insecureEnableGroups: true - - # When enabled, the OpenID Connector will query the UserInfo endpoint for additional claims. UserInfo claims - # take priority over claims returned by the IDToken. This option should be used when the IDToken doesn't contain - # all the claims requested. - # https://openid.net/specs/openid-connect-core-1_0.html#UserInfo - # getUserInfo: true - - # The set claim is used as user id. - # Claims list at https://openid.net/specs/openid-connect-core-1_0.html#Claims - # Default: sub - # userIDKey: nickname - - # The set claim is used as user name. - # Default: name - # userNameKey: nickname - - # The acr_values variable specifies the Authentication Context Class Values within - # the Authentication Request that the Authorization Server is being requested to process - # from this Client. - # acrValues: - # - - # - - - # For offline_access, the prompt parameter is set by default to "prompt=consent". - # However this is not supported by all OIDC providers, some of them support different - # value for prompt, like "prompt=login" or "prompt=none" - # promptType: consent - - # Some providers return non-standard claims (eg. mail). - # Use claimMapping to map those claims to standard claims: - # https://openid.net/specs/openid-connect-core-1_0.html#Claims - # claimMapping can only map a non-standard claim to a standard one if it's not returned in the id_token. - claimMapping: - # The set claim is used as preferred username. - # Default: preferred_username - # preferred_username: other_user_name - - # The set claim is used as email. - # Default: email - # email: mail - - # The set claim is used as groups. - # Default: groups - # groups: "cognito:groups" diff --git a/charts/envoy-gateway-controller/charts/gateway-helm-1.4.2.tgz b/charts/envoy-gateway-controller/charts/gateway-helm-1.4.2.tgz new file mode 100644 index 00000000..3af0ae48 Binary files /dev/null and b/charts/envoy-gateway-controller/charts/gateway-helm-1.4.2.tgz differ diff --git a/charts/envoy-gateway-crds/charts/gateway-crds-helm-1.4.2.tgz b/charts/envoy-gateway-crds/charts/gateway-crds-helm-1.4.2.tgz new file mode 100644 index 00000000..15c725b2 Binary files /dev/null and b/charts/envoy-gateway-crds/charts/gateway-crds-helm-1.4.2.tgz differ diff --git a/charts/experimental-mongodb/.helmignore b/charts/experimental-mongodb/.helmignore deleted file mode 100644 index 0e8a0eb3..00000000 --- a/charts/experimental-mongodb/.helmignore +++ /dev/null @@ -1,23 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*.orig -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ diff --git a/charts/experimental-mongodb/Chart.yaml b/charts/experimental-mongodb/Chart.yaml deleted file mode 100644 index c139ecb8..00000000 --- a/charts/experimental-mongodb/Chart.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: v2 -name: dc-template -description: DeepCypher AoA template cluster decleration - -# A chart can be either an 'application' or a 'library' chart. -# -# Application charts are a collection of templates that can be packaged into versioned archives -# to be deployed. -# -# Library charts provide useful utilities or functions for the chart developer. They're included as -# a dependency of application charts to inject those utilities and functions into the rendering -# pipeline. Library charts do not define any templates and therefore cannot be deployed. -type: application - -# This is the chart version. This version number should be incremented each time you make changes -# to the chart and its templates, including the app version. -# Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.0 - -# This is the version number of the application being deployed. This version number should be -# incremented each time you make changes to the application. Versions are not expected to -# follow Semantic Versioning. They should reflect the version the application is using. -# It is recommended to use it with quotes. -appVersion: "0.1.0" diff --git a/charts/experimental-mongodb/README.md b/charts/experimental-mongodb/README.md deleted file mode 100644 index e1e5864b..00000000 --- a/charts/experimental-mongodb/README.md +++ /dev/null @@ -1,13 +0,0 @@ -# dc-template - -![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.1.0](https://img.shields.io/badge/AppVersion-0.1.0-informational?style=flat-square) - -DeepCypher AoA template cluster decleration - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| exmongo.persistence.size | string | `"9Gi"` | | -| exmongo.version | string | `"10.30.12"` | | - diff --git a/charts/experimental-mongodb/templates/mongo-netpol.yaml b/charts/experimental-mongodb/templates/mongo-netpol.yaml deleted file mode 100644 index 350abc26..00000000 --- a/charts/experimental-mongodb/templates/mongo-netpol.yaml +++ /dev/null @@ -1,38 +0,0 @@ -# @Author: GeorgeRaven -# @Date: 2021-05-14T14:38:52+01:00 -# @Last modified by: archer -# @Last modified time: 2021-05-20T19:57:00+01:00 -# @License: please see LICENSE file in project root - -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-deny-local-egress - namespace: mongodb-experimental -spec: - podSelector: {} - policyTypes: - - Egress - egress: - - to: - # allow to go to WAN internet - - ipBlock: - cidr: 0.0.0.0/0 - except: - - 10.0.0.0/8 - - 192.168.0.0/16 - - 172.16.0.0/20 - # or allowed to go to local namespace - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: mongodb-experimental - # Also - - to: - # allow DNS lookups - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: kube-system - # on specific ports - ports: - - protocol: UDP - port: 53 diff --git a/charts/experimental-mongodb/templates/mongodb-helm.yaml b/charts/experimental-mongodb/templates/mongodb-helm.yaml deleted file mode 100644 index 63c9ea86..00000000 --- a/charts/experimental-mongodb/templates/mongodb-helm.yaml +++ /dev/null @@ -1,47 +0,0 @@ -# @Author: archer -# @Date: 2021-12-08T15:41:37+00:00 -# @Last modified by: archer -# @Last modified time: 2021-12-10T13:08:37+00:00 - - - -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: exp-mongodb-helm - namespace: argocd - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - destination: - name: '' - namespace: mongodb-experimental - server: 'https://kubernetes.default.svc' - source: - path: '' - repoURL: 'https://charts.bitnami.com/bitnami' - targetRevision: {{ .Values.exmongo.version }} - chart: mongodb - # helm: - # parameters: - # - name: key - # value: 'value' - helm: - values: |- - image: - tag: "5.0.5-debian-10-r5" - architecture: "standalone" - tls: - enabled: true - mode: preferTLS - directoryPerDB: true - persistence: - size: {{ .Values.exmongo.persistence.size }} - storageClass : exp-mongodb - project: default - syncPolicy: - automated: - prune: true - selfHeal: true - syncOptions: - - CreateNamespace=true diff --git a/charts/experimental-mongodb/values.yaml b/charts/experimental-mongodb/values.yaml deleted file mode 100644 index 6012be73..00000000 --- a/charts/experimental-mongodb/values.yaml +++ /dev/null @@ -1,4 +0,0 @@ -exmongo: - version: 10.30.12 - persistence: - size: 9Gi diff --git a/charts/external-dns/.helmignore b/charts/external-dns/.helmignore deleted file mode 100644 index 0e8a0eb3..00000000 --- a/charts/external-dns/.helmignore +++ /dev/null @@ -1,23 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*.orig -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ diff --git a/charts/external-dns/Chart.lock b/charts/external-dns/Chart.lock deleted file mode 100644 index af44474a..00000000 --- a/charts/external-dns/Chart.lock +++ /dev/null @@ -1,12 +0,0 @@ -dependencies: -- name: external-dns - repository: https://kubernetes-sigs.github.io/external-dns - version: 1.18.0 -- name: etcd - repository: oci://registry-1.docker.io/bitnamicharts - version: 12.0.12 -- name: coredns - repository: https://coredns.github.io/helm - version: 1.43.0 -digest: sha256:69902725f52798b49a8d5ea7b6bc58c0617aa0f236768ead5b411926e8e7bb51 -generated: "2025-07-23T22:05:26.928600788Z" diff --git a/charts/external-dns/Chart.yaml b/charts/external-dns/Chart.yaml deleted file mode 100644 index 26158350..00000000 --- a/charts/external-dns/Chart.yaml +++ /dev/null @@ -1,38 +0,0 @@ -apiVersion: v2 -name: external-dns -description: A Helm chart for Kubernetes - -# A chart can be either an 'application' or a 'library' chart. -# -# Application charts are a collection of templates that can be packaged into versioned archives -# to be deployed. -# -# Library charts provide useful utilities or functions for the chart developer. They're included as -# a dependency of application charts to inject those utilities and functions into the rendering -# pipeline. Library charts do not define any templates and therefore cannot be deployed. -type: application - -# This is the chart version. This version number should be incremented each time you make changes -# to the chart and its templates, including the app version. -# Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.0 - -# This is the version number of the application being deployed. This version number should be -# incremented each time you make changes to the application. Versions are not expected to -# follow Semantic Versioning. They should reflect the version the application is using. -# It is recommended to use it with quotes. -appVersion: "1.16.0" - -dependencies: -- name: external-dns - version: 1.18.0 - repository: "https://kubernetes-sigs.github.io/external-dns" - condition: external-dns.enabled -- name: etcd - version: 12.0.12 - repository: "oci://registry-1.docker.io/bitnamicharts" - condition: etcd.enabled -- name: coredns - version: 1.43.0 - repository: "https://coredns.github.io/helm" - condition: coredns.enabled diff --git a/charts/external-dns/README.md b/charts/external-dns/README.md deleted file mode 100644 index a3bc4ba4..00000000 --- a/charts/external-dns/README.md +++ /dev/null @@ -1,30 +0,0 @@ -# external-dns - -![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.16.0](https://img.shields.io/badge/AppVersion-1.16.0-informational?style=flat-square) - -A Helm chart for Kubernetes - -## Requirements - -| Repository | Name | Version | -|------------|------|---------| -| https://coredns.github.io/helm | coredns | 1.43.0 | -| https://kubernetes-sigs.github.io/external-dns | external-dns | 1.17.0 | -| oci://registry-1.docker.io/bitnamicharts | etcd | 11.3.6 | - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| coredns.enabled | bool | `true` | | -| coredns.isClusterService | bool | `false` | | -| coredns.rbac.create | bool | `true` | | -| coredns.servers[0].plugins | list | `[{"name":"errors"},{"configBlock":"lameduck 5s","name":"health"},{"name":"ready"},{"configBlock":"pods insecure\nfallthrough in-addr.arpa ip6.arpa\nttl 30","name":"kubernetes","parameters":"cluster.local in-addr.arpa ip6.arpa"},{"name":"prometheus","parameters":"0.0.0.0:9153"},{"name":"forward","parameters":". /etc/resolv.conf"},{"configBlock":"stubzones\npath /skydns\nendpoint http://etcd:2379","name":"etcd","parameters":"deepcypher.me"},{"name":"cache","parameters":30},{"name":"loop"},{"name":"reload"},{"name":"loadbalance"}]` | expose the service on a different port servicePort: 5353 If serviceType is nodePort you can specify nodePort here nodePort: 30053 hostPort: 53 | -| coredns.servers[0].port | int | `53` | | -| coredns.servers[0].zones[0].zone | string | `"."` | | -| etcd.enabled | bool | `true` | | -| etcd.fullnameOverride | string | `"etcd"` | | -| etcd.replicaCount | int | `3` | | -| external-dns.enabled | bool | `false` | | -| external-dns.provider.name | string | `"coredns"` | | - diff --git a/charts/external-dns/templates/etcd.yaml b/charts/external-dns/templates/etcd.yaml deleted file mode 100644 index c262ba07..00000000 --- a/charts/external-dns/templates/etcd.yaml +++ /dev/null @@ -1,85 +0,0 @@ -#apiVersion: v1 -#kind: Service -#metadata: -# name: etcd-client -#spec: -# type: ClusterIP -# ports: -# - name: etcd-client -# port: 2379 -# protocol: TCP -# targetPort: 2379 -# selector: -# app.kubernetes.io/name: etcd -#--- -#apiVersion: v1 -#kind: Service -#metadata: -# name: etcd -#spec: -# clusterIP: None -# ports: -# - port: 2379 -# name: client -# - port: 2380 -# name: peer -# selector: -# app.kubernetes.io/name: etcd -#--- -#apiVersion: apps/v1 -#kind: StatefulSet -#metadata: -# name: etcd -# labels: -# app.kubernetes.io/name: etcd -#spec: -# serviceName: etcd -# replicas: 3 -# selector: -# matchLabels: -# app.kubernetes.io/name: etcd -# template: -# metadata: -# name: etcd -# labels: -# app.kubernetes.io/name: etcd -# spec: -# containers: -# - name: etcd -# image: quay.io/coreos/etcd:v3.5.9 -# env: -# - name: PEERS -# value: "etcd-0=http://etcd-0.{{ .Release.Namespace }}:2380,etcd-1=http://etcd-1.{{ .Release.Namespace }}:2380,etcd-2=http://etcd-2.{{ .Release.Namespace }}:2380" -# - name: HOSTNAME -# valueFrom: -# fieldRef: -# fieldPath: metadata.name -# ports: -# - containerPort: 2379 -# name: client -# - containerPort: 2380 -# name: peer -# volumeMounts: -# - name: data -# mountPath: /var/run/etcd -# command: -# - /usr/local/bin/etcd -# args: -# - --name ${HOSTNAME} -# - --listen-peer-urls http://0.0.0.0:2380 -# - --listen-client-urls http://0.0.0.0:2379 -# - --advertise-client-urls http://${HOSTNAME}.{{ .Release.Namespace }}:2379 -# - --initial-advertise-peer-urls http://${HOSTNAME}:2380 -# - --initial-cluster-token etcd-cluster-1 -# - --initial-cluster ${PEERS} -# - --initial-cluster-state new -# - --data-dir /var/run/etcd/default.etcd -# volumeClaimTemplates: -# - metadata: -# name: data -# spec: -# storageClassName: ceph-filesystem -# accessModes: [ "ReadWriteOnce" ] -# resources: -# requests: -# storage: 2Gi diff --git a/charts/external-dns/values.yaml b/charts/external-dns/values.yaml deleted file mode 100644 index e9297edc..00000000 --- a/charts/external-dns/values.yaml +++ /dev/null @@ -1,56 +0,0 @@ -external-dns: - enabled: false - provider: - name: "coredns" - -coredns: - enabled: true - rbac: - create: true - isClusterService: false # default true but would integrat to k8s cluster itself - - servers: - - zones: - - zone: . - port: 53 - # -- expose the service on a different port - # servicePort: 5353 - # If serviceType is nodePort you can specify nodePort here - # nodePort: 30053 - # hostPort: 53 - plugins: - - name: errors - # Serves a /health endpoint on :8080, required for livenessProbe - - name: health - configBlock: |- - lameduck 5s - # Serves a /ready endpoint on :8181, required for readinessProbe - - name: ready - # Required to query kubernetes API for data - - name: kubernetes - parameters: cluster.local in-addr.arpa ip6.arpa - configBlock: |- - pods insecure - fallthrough in-addr.arpa ip6.arpa - ttl 30 - # Serves a /metrics endpoint on :9153, required for serviceMonitor - - name: prometheus - parameters: 0.0.0.0:9153 - - name: forward - parameters: . /etc/resolv.conf - - name: etcd - parameters: deepcypher.me - configBlock: |- - stubzones - path /skydns - endpoint http://etcd:2379 - - name: cache - parameters: 30 - - name: loop - - name: reload - - name: loadbalance - -etcd: - enabled: true - fullnameOverride: etcd # to ensure consistent naming - replicaCount: 3